Privacy Policy

1. Who we are

signalIQ is operated by Appzoola Pty Ltd (ABN 36 645 775 775), a company registered in Australia. We are the data controller for the information described here.

Questions, corrections or deletion requests: info@signaliq.agency.

2. Scanning a website

Running a scan requires no account and no email address. We record the domain scanned, the score, the individual check results and the time — so we can show you a trend, and so we know the tool is working. Without an account you see your score and your most important findings; creating a free account shows the full report.

We also record the IP address the scan came from, purely to detect abuse of a free tool. IP addresses are deleted automatically after 30 days by a scheduled job; the scan record itself remains without it.

We scan only what is publicly visible on the website you name, exactly as any visitor or search engine would see it. We do not log in to anything, bypass any access control, or scan any page you have not made public.

3. Creating an account

If you save a report we ask for an email address. We use it to send you a sign-in link, your weekly report if you leave that switched on, and occasional messages about the service.

The weekly report lists the problems our latest scan of your website found, with suggestions for fixing them, and offers a free call with us. It is sent only to the people on your account. Every one of these emails has an unsubscribe link that works with one click and never expires. Unsubscribing stops the weekly report for that website; your scans carry on and you can switch the report back on in your account. We do not email people who have not created an account.

We do not store passwords, because we do not use them. Signing in works by emailing you a single-use link. We store the address itself and a one-way hash of each link, never the link.

4. Connecting Google or Meta

You can connect Google Analytics, Google Search Console, Google Ads or Meta Ads. Doing so is entirely optional and the product works without it.

Access is read-only. signalIQ can read reporting data from those accounts. It cannot create, change, pause or delete anything — no campaign, no budget, no property setting. That is a property of the permissions we request, not a promise about our intentions.

Authorisation happens on Google's or Meta's own consent screen. We never see or ask for your password. The resulting access tokens are stored encrypted, and you can disconnect at any time from the Integrations page, which revokes our access immediately.

Data retrieved this way is used onlyto show you your own reporting inside your own account. It is never pooled with other customers' data, never used to benchmark one customer against another, and never sold or shared for advertising.

4b. Commenting on or messaging our Instagram

If you comment a keyword (such as “SCAN”) on one of our Instagram posts, or send us a direct message, we reply with the free guide for that post and, if you ask, a scan of a website you send us.

To do that we record your Instagram account's app-scoped ID and username, the comment or message ID, which post it was on, whether you follow our account, and which replies we sent. If you send a website address we scan it exactly as in section 2. We do not read your other messages, your followers or anything outside the conversation with us.

This information is used only to send you what you asked for and to count how many people each post helped. It is never sold, never shared for advertising and never used to message you about anything else. It is kept until you ask us to delete it — see data deletion.

5. Cookies and analytics

Cookies that are strictly necessary — keeping you signed in, remembering your light or dark theme, and recording your cookie choice — are set without asking, because the site cannot work without them.

Analytics cookies are set only if you accept them in the banner. Declining is honoured on the server, not just hidden in the interface: if you decline, Google Analytics is not loaded. We do not install a Meta Pixel on this website or send its visitor events to Meta for advertising.

We also keep our own record of visits to this website, on our own servers and shared with no one: the pages you view, where you clicked and how far you scrolled, your device and browser type, and the page that sent you here. If you have not accepted analytics cookies, the last part of your IP address is removed before it is stored and each visit stands alone. If you accept, we keep your full IP address and a random identifier in your browser so we can see return visits. We use this only to understand and improve the website. We estimate country from the address using a database on our own server; the address is not sent to a location provider. Country can be wrong, and we do not infer a city from it.

6. Who else sees your data

We do not sell this website's visitor data or use it to target advertising. It reaches:

• Our own servers, which hold our first-party visit, click and scan records.
• Google Analytics, only after you accept analytics cookies, for site usage measurement. This is separate from our first-party records.
• Google and Meta account APIs, only when you authorise us to read data from your connected business accounts. We do not send this website's visitor events to Meta.
• AI providers (OpenAI, Groq), when measuring whether assistants can describe your business. We send the public question — for example “best physio in Parramatta” — and your business name and domain. We do not send your analytics, your ad data, or anything from your account.
• Google PageSpeed Insights, which receives the public URL being measured.
• Anyone we are legally required to disclose to, if that ever happens.

7. Where it is stored

On servers we control in Germany, operated by our hosting provider. If you are outside that country, your information is transferred and stored there. Access is limited to the people who run signalIQ, and every application connection uses a restricted database account rather than an administrative one.

8. How long we keep it

• Scan IP addresses: 30 days, then deleted automatically.
• Scan results, reports and connected data: until you delete your account.
• Sign-in links: they expire, and are single-use.
• Anonymous scans with no account attached: kept as a record that the scan happened, with no personal information after the 30-day IP purge.

9. Deleting your data

Go to Settings → Delete this account. It removes the account, every sign-in on it, your projects, scan history, saved reports and connected integrations.

It is a real deletion, not a hidden flag. The records are removed, it is immediate, and we cannot restore them afterwards. You can also email us and we will do it for you.

10. Your rights

You can ask us what we hold about you, correct it, have it deleted, or object to how we use it. Email info@signaliq.agency and we will respond within 30 days. If you are in Australia and are not satisfied, you can complain to the Office of the Australian Information Commissioner; if you are in the UK or EU, to your local data protection authority.

11. Changes

If we change how we use your information in a way that materially affects you, we will email the address on your account rather than quietly updating this page.